Skip to content

Commit

Permalink
Bump actions/dependency-review-action from 4.3.2 to 4.3.3 (openvinoto…
Browse files Browse the repository at this point in the history
…olkit#24876)

Bumps
[actions/dependency-review-action](https://github.com/actions/dependency-review-action)
from 4.3.2 to 4.3.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/dependency-review-action/releases">actions/dependency-review-action's
releases</a>.</em></p>
<blockquote>
<h2>Notes for v4.3.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Allow slashes in purl package names by <a
href="https://github.com/juxtin"><code>@​juxtin</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/765">actions/dependency-review-action#765</a></li>
<li>use the v3 version of the deps.dev API by <a
href="https://github.com/josieang"><code>@​josieang</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/741">actions/dependency-review-action#741</a></li>
<li>PR with suggestions - [Improvement]: Help streamline / simplify
dependency review action README by <a
href="https://github.com/am-stead"><code>@​am-stead</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/773">actions/dependency-review-action#773</a></li>
<li>fix show-openssf-scorecard-levels input by <a
href="https://github.com/ramann"><code>@​ramann</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/776">actions/dependency-review-action#776</a></li>
<li>Updates to the contribution guidelines by <a
href="https://github.com/jonjanego"><code>@​jonjanego</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/778">actions/dependency-review-action#778</a></li>
<li>Create issue templates by <a
href="https://github.com/jonjanego"><code>@​jonjanego</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/777">actions/dependency-review-action#777</a></li>
<li>Fix the max comment length issue by <a
href="https://github.com/jhutchings1"><code>@​jhutchings1</code></a> and
<a href="https://github.com/elireisman"><code>@​elireisman</code></a> in
<a
href="https://redirect.github.com/actions/dependency-review-action/pull/767">actions/dependency-review-action#767</a></li>
<li>Bump project version to 4.3.3 in prep for a release by <a
href="https://github.com/elireisman"><code>@​elireisman</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/781">actions/dependency-review-action#781</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/josieang"><code>@​josieang</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/741">actions/dependency-review-action#741</a></li>
<li><a href="https://github.com/am-stead"><code>@​am-stead</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/773">actions/dependency-review-action#773</a></li>
<li><a href="https://github.com/ramann"><code>@​ramann</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/776">actions/dependency-review-action#776</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/dependency-review-action/compare/v4.3.2...v4.3.3">https://github.com/actions/dependency-review-action/compare/v4.3.2...v4.3.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/dependency-review-action/commit/72eb03d02c7872a771aacd928f3123ac62ad6d3a"><code>72eb03d</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/dependency-review-action/issues/781">#781</a>
from actions/release-v4.3.3</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/137d8b42ce0de43f5c5bfb9387870a16495547db"><code>137d8b4</code></a>
bump to version v4.3.3</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/e6b618ed051bcc41ac296ca2f39259a5cadfbe03"><code>e6b618e</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/dependency-review-action/issues/767">#767</a>
from actions/max-comment-length</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/3c42649204e62c5b7e4b8a64e867f209220d0528"><code>3c42649</code></a>
fix ws for linter</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/8e6ea8d29be9a4f679e5f77417495f0a7cfc4876"><code>8e6ea8d</code></a>
update packaging</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/1b3d2772d090bbbfaea250a42a7672c5596ec39f"><code>1b3d277</code></a>
post-review: add PR comment full summary test case</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/220872c81a2b7320d542265bc488c6f1cb438dad"><code>220872c</code></a>
Update src/main.ts</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/087d0f81a50ff2b07f4c77eed4877c7ca815eca6"><code>087d0f8</code></a>
repackage to update dist</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/4531204be7f2a33809812cf5764ad3ee1153030f"><code>4531204</code></a>
whitespace</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/df1ca890c5abee86bfafafdb2404292bdb60b66d"><code>df1ca89</code></a>
appease linter</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/dependency-review-action/compare/0c155c5e8556a497adf53f2c18edabf945ed8e70...72eb03d02c7872a771aacd928f3123ac62ad6d3a">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/dependency-review-action&package-manager=github_actions&previous-version=4.3.2&new-version=4.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • Loading branch information
dependabot[bot] authored Jun 6, 2024
1 parent b9e1ef7 commit 4fcfaf2
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .github/workflows/dependency_review.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ jobs:
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6

- name: Dependency Review
uses: actions/dependency-review-action@0c155c5e8556a497adf53f2c18edabf945ed8e70 # v4.3.2
uses: actions/dependency-review-action@72eb03d02c7872a771aacd928f3123ac62ad6d3a # v4.3.3
with:
config-file: './.github/dependency_review.yml'
base-ref: ${{ github.pull_request.base.sha || github.event.merge_group.base_ref }}
Expand Down

0 comments on commit 4fcfaf2

Please sign in to comment.